Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
File: QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft (raw, json)
Hash identifier: rRf8JuwrSeokLaFytX1+R6H5ASvyWqVdwkunW3hsN+c=
Subject key identifier: 1C:DE:8E:8B:0D:77:40:52:E4:DA:1D:E8:7B:48:56:1F:EC:08:64:38
Authority key identifier: 42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
Certificate issuer: /CN=42004477243ca20b95dc8efe07337639806f6075
Certificate serial: 01985268B87CFBC8080DBEEEC6DC27E5F18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
Manifest number: 1553
Signing time: Mon 28 Jul 2025 19:00:51 +0000
Manifest this update: Mon 28 Jul 2025 19:00:51 +0000
Manifest next update: Tue 29 Jul 2025 19:00:51 +0000
Files and hashes: 1: OEwb1lDHunikfNaNODhoAnbiQCo.roa (hash: wWLLrhKTcf6mPU2Bqqwm1puc/7JHEkcQ5M3ZaPHxpgg=)
2: QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl (hash: aFY3GEWnGNTc6l0SfEjWpbvobvyQXzfOUZ8rUpwsvJg=)
3: vn8Vk2vP0QzgnWs8YePhZCt8-Lc.roa (hash: NAYB0xo+Xhi57/QawXnfFqpG2CzRv0IH2N4vezreDYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:b8:7c:fb:c8:08:0d:be:ee:c6:dc:27:e5:f1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42004477243ca20b95dc8efe07337639806f6075
Validity
Not Before: Jul 28 19:00:51 2025 GMT
Not After : Jul 29 19:00:51 2025 GMT
Subject: CN=1cde8e8b0d774052e4da1de87b48561fec086438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:dd:2c:3e:3a:1d:40:2d:c8:a0:ad:62:4c:
66:7b:29:12:43:e9:72:b6:ca:fd:64:e8:2f:98:95:
04:53:34:26:38:17:61:1a:a2:ae:78:54:d5:e7:bf:
66:fe:6c:2e:80:e1:95:06:89:d0:ad:09:e2:52:d2:
58:d0:14:07:4e:52:f2:c6:1c:2a:3e:c3:c0:7e:30:
2c:2a:13:70:14:88:f5:8a:e1:cd:52:f2:0e:a0:8d:
f6:4c:c6:9f:21:2d:10:4f:cf:00:2b:7a:e2:2f:05:
a9:40:8d:a3:16:ee:7b:00:5b:8d:66:f0:0e:c6:11:
de:a2:14:06:d7:f0:17:58:6d:aa:63:02:77:b6:be:
f9:6c:21:e9:e3:dc:47:af:7d:9f:a5:ca:b7:4d:a4:
bf:c3:df:25:38:41:8e:3b:ab:01:90:dd:de:8d:88:
74:56:77:95:76:8d:0b:42:b7:51:9e:fd:dc:02:c3:
81:df:d3:97:67:ae:c2:ac:be:88:71:5a:03:3a:a5:
3f:cb:ad:74:f6:47:7a:9e:1f:4c:79:31:0a:f8:ac:
3f:d3:0b:24:31:bf:4e:e0:89:9f:44:93:6b:1e:45:
47:5a:75:87:a6:9a:65:cc:cb:2c:83:b2:3e:30:ce:
fb:3e:ed:05:5c:db:9d:cd:75:19:e8:d2:4f:b4:bb:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DE:8E:8B:0D:77:40:52:E4:DA:1D:E8:7B:48:56:1F:EC:08:64:38
X509v3 Authority Key Identifier:
keyid:42:00:44:77:24:3C:A2:0B:95:DC:8E:FE:07:33:76:39:80:6F:60:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgBEdyQ8oguV3I7-BzN2OYBvYHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fd757c-3a7c-4b31-b4a1-cfa7a310d542/1/QgBEdyQ8oguV3I7-BzN2OYBvYHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3c:14:f0:32:ac:0a:58:54:70:83:22:05:0e:cc:4b:8a:8e:
f7:05:2f:6d:04:56:36:01:c0:2e:c8:9a:12:2c:20:62:94:8e:
01:8c:7d:f9:71:28:3d:8b:42:7a:c6:b7:71:bd:93:8c:53:61:
c4:3f:ad:56:5b:84:bf:f6:6e:76:22:bb:da:70:f9:b6:4a:10:
77:8a:9b:2a:3e:5a:70:a9:b3:de:06:ee:17:83:9e:96:e2:50:
12:75:a9:83:d8:f7:d8:86:d3:fc:30:55:eb:92:e1:15:a7:87:
87:b1:05:95:0a:39:c2:be:a1:c3:d3:b0:1b:79:50:5f:27:c9:
66:c7:0b:52:2f:f4:db:b0:d3:a2:05:ee:d2:6b:73:c0:59:54:
2c:5b:cc:b5:b9:59:43:bb:d1:df:7a:54:3a:c9:75:23:84:b9:
04:e5:7f:4a:fa:cd:97:6c:fb:d5:be:e1:39:a4:a5:7c:ad:5b:
c5:63:67:9c:0d:29:e4:2d:ba:13:1c:0c:b1:b7:03:62:69:f6:
dd:8a:c5:52:76:f4:fc:7d:74:7d:45:ee:53:ff:dc:fb:94:60:
4b:f5:f3:a5:0a:67:8c:08:24:c6:2d:c4:ec:1b:17:26:08:7b:
74:9d:16:b6:3b:04:cb:bc:bc:76:8b:11:e6:85:c6:9f:96:69:
8d:d4:80:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:39:25 2025 by rpki-client